Static task
static1
Behavioral task
behavioral1
Sample
21fdefb7a869bf7db4341cf0f7527e1a87f37191c5ca79b169f05ca657596e34.exe
Resource
win7-20240903-en
General
-
Target
21fdefb7a869bf7db4341cf0f7527e1a87f37191c5ca79b169f05ca657596e34.zip
-
Size
1.2MB
-
MD5
9db397278c2331187c132609b6a51ec0
-
SHA1
307ff00180e5403f89744ca715371c2ae51737ed
-
SHA256
21fdefb7a869bf7db4341cf0f7527e1a87f37191c5ca79b169f05ca657596e34
-
SHA512
5b3b54fe9d23b6f55c8098ccb75ad3cca24220e632ffae00f6e4d5132124a0d90db7a36a4d13c4432742c74365a6a88615639fdef51078a4518a64eaa59060d5
-
SSDEEP
24576:tPEIhpOkc9R77MSc5Ao4oFDsBGSGXbGXPiRx2zaUsVCbw2hDE1XFstL:tpSjz7ISAFIBbGrQ6UaUgd2hgEtL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21fdefb7a869bf7db4341cf0f7527e1a87f37191c5ca79b169f05ca657596e34.zip
Files
-
21fdefb7a869bf7db4341cf0f7527e1a87f37191c5ca79b169f05ca657596e34.zip.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ